Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/dbfb942a97846c07bb2a377c226195e12dec887b.roa
File:                     dbfb942a97846c07bb2a377c226195e12dec887b.roa (raw, json)
Hash identifier:          NgqxumrNIFi8WgbKkIbVI4PBfezW8f/bBexsIcumWRM=
Subject key identifier:   2E:D6:42:81:6D:86:05:35:E3:D7:F7:F7:33:D9:7B:0D:F5:C0:98:0B
Certificate issuer:       /CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Certificate serial:       1A1EAF
Authority key identifier: 3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/dbfb942a97846c07bb2a377c226195e12dec887b.roa
Signing time:             Fri 06 Oct 2023 19:57:29 +0000
ROA not before:           Thu 05 Oct 2023 19:57:29 +0000
ROA not after:            Mon 06 Oct 2025 19:57:29 +0000
asID:                     269886
IP address blocks:        2803:24e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711791 (0x1a1eaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
        Validity
            Not Before: Oct  5 19:57:29 2023 GMT
            Not After : Oct  6 19:57:29 2025 GMT
        Subject: CN=dbfb942a97846c07bb2a377c226195e12dec887b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:52:87:cd:e4:7f:a8:f7:08:76:b0:fe:8e:
                    45:4d:2c:05:ce:87:5a:ac:ed:70:ae:9e:08:9c:f6:
                    6b:22:86:47:14:46:83:57:5e:ab:0c:ed:56:ad:ea:
                    f9:c5:2b:85:f4:b1:93:25:f3:02:a9:e0:7b:fc:c7:
                    6e:8e:b6:8d:fb:33:55:d3:dc:ba:62:77:f6:6c:63:
                    e8:f7:5e:ed:6b:6d:0a:94:d4:35:b0:ef:77:92:c3:
                    59:3e:87:69:f5:32:d1:18:c0:10:fd:94:41:56:d3:
                    e2:cf:9e:c0:c5:65:93:01:f2:30:a5:70:65:b4:27:
                    c1:4b:2f:55:b0:ea:bb:ad:01:a2:7c:46:76:a7:35:
                    60:4b:ad:0d:8c:84:0e:5f:ea:f7:9d:20:fb:74:bb:
                    f2:25:6d:8b:9e:1f:63:48:6b:4d:3a:a8:8a:dd:c3:
                    e6:40:6e:19:8f:e9:d7:1c:7d:a4:5c:f4:50:fd:ec:
                    3e:8f:5e:d5:49:8f:1c:58:db:94:7d:41:8f:32:c5:
                    09:0b:a7:da:27:99:c6:e5:18:b0:5b:ed:6d:dd:c8:
                    01:43:93:4f:d7:a9:1b:42:3a:22:1f:ad:51:11:cf:
                    5f:11:3d:54:ae:c3:4f:15:32:fd:75:57:29:26:93:
                    5b:fd:c3:ae:2b:e2:dc:fd:00:ad:e8:d6:5c:60:90:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:42:81:6D:86:05:35:E3:D7:F7:F7:33:D9:7B:0D:F5:C0:98:0B
            X509v3 Authority Key Identifier:
                keyid:3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/dbfb942a97846c07bb2a377c226195e12dec887b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:22:54:25:63:bd:1b:c3:a4:16:13:f7:a1:f8:07:83:db:84:
         27:39:64:9d:c8:5e:12:29:28:61:b3:54:45:b3:2b:7b:79:5d:
         47:74:e7:e7:e9:bf:84:41:f1:b1:74:f1:b1:c3:b9:f7:a3:99:
         cc:6c:84:6a:37:bd:59:06:b6:b2:3d:30:49:d4:4f:b2:87:39:
         de:7f:5d:92:28:7e:55:40:51:e8:45:a8:27:12:78:95:2f:55:
         a4:3a:a3:41:3c:67:89:eb:d7:dd:9a:a9:24:85:2f:af:88:00:
         dd:09:2c:07:0d:f8:0e:07:e7:c3:ef:01:ca:b0:b4:42:cb:6e:
         cb:22:92:9c:ea:5f:b1:e5:a1:09:44:e4:28:bd:6c:aa:d7:a9:
         78:c6:9f:e7:f6:15:4f:77:79:7b:88:37:d2:c1:3c:d7:c4:dd:
         98:77:01:18:77:e2:c4:dd:8f:08:2e:43:a5:66:d8:7a:90:b6:
         35:e7:51:05:0d:3d:09:f3:9b:99:09:db:96:2e:30:77:95:ef:
         39:3a:e8:64:c3:d2:ed:23:ea:c6:94:cb:bc:ed:89:84:93:51:
         8c:10:62:1c:21:4b:81:2c:f1:c0:8d:54:e3:68:3a:2b:34:0d:
         01:cf:87:ee:f1:6a:e1:88:00:42:af:e8:de:1b:50:7f:c1:c5:
         42:2d:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----